You have to use the -GenerateRequest parameter when you run the New-ExchangeCertificate cmdlet on server {0} with the -RequestFile ...